CVE-2026-45848: apparmor: fix NULL sock in aa_sock_file_perm
In the Linux kernel, the following vulnerability has been resolved:
apparmor: fix NULL sock in aasockfileperm
Deal with the potential that sock and sock-sk can be NULL during socket setup or teardown. This could lead to an oops. The fix for NULL pointer dereference in unixneedsrevalidation shows this is at least possible for afunix sockets. While the fix for afunix sockets applies for newer mediation this is still the fall back path for older afunix mediation and other sockets, so ensure it is covered.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-45848?
The severity of CVE-2026-45848 is rated as medium with a score of 5.5 on the CVSS scale.
How do I fix CVE-2026-45848?
To fix CVE-2026-45848, you should apply the latest patch provided in the Linux kernel updates that address the specific NULL pointer dereference.
What systems are affected by CVE-2026-45848?
CVE-2026-45848 affects systems running the Linux kernel, specifically those utilizing AppArmor.
What types of vulnerabilities are related to CVE-2026-45848?
CVE-2026-45848 is related to null pointer dereference vulnerabilities that can lead to potential crashes or oops during socket operations.
When was CVE-2026-45848 published?
CVE-2026-45848 was published on May 27, 2026.